Commit Graph

Select branches

Hide Pull Requests

codex/fix-admin-token-disclosure-in-logs

codex/fix-auto-router-to-enforce-model-allowlist

codex/fix-backend-fallback-route-scope-bypass

codex/fix-crates-publish-guard-vulnerability

codex/fix-explicit-model-routing-vulnerability

codex/fix-loopback-open-auth-vulnerability

codex/fix-pr-recap-workflow-secret-vulnerability

codex/fix-virtual-key-budget-enforcement-issue

codex/fix-vulnerability-causing-zero-cost-usage

codex/fix-vulnerability-in-virtual-key-budget-handling

codex/propose-fix-for-network-exposed-open-relay

codex/propose-fix-for-route-scoped-access-issue

feat/success-callback

main

#1

#10

#11

#12

#13

#14

#15

#16

#17

#18

#19

#2

#20

#21

#22

#23

#24

#25

#26

#27

#28

#29

#3

#30

#31

#32

#33

#34

#35

#36

#37

#38

#39

#4

#40

#41

#42

#43

#44

#45

#46

#47

#48

#49

#5

#50

#6

#7

#8

#9

v0.10.0

v0.10.1

v0.11.0

v0.12.0

v0.13.0

v0.14.0

v0.14.1

v0.15.0

v0.15.1

v0.16.0

v0.16.1

v0.9.0

v0.9.1

v0.9.2

v0.9.3

v0.9.4

v0.9.5

v0.9.6

v0.9.7

v0.9.8

v0.9.9

Mono Color

• 3a62796a75 feat(tools): wire ToolEngineState into AppState with config-driven setup whit3rabbitandClaude Sonnet 4.6 2026-03-30 22:07:23 -05:00
• 0253b47819 feat(admin): add MCP server management endpoints (list, add, remove) whit3rabbitandClaude Sonnet 4.6 2026-03-30 22:03:55 -05:00
• 66864d8198 docs: Phase 1 implementation plan for batch orchestration engine whit3rabbitandClaude Opus 4.6 2026-03-30 22:02:09 -05:00
• 254ed8d9b6 feat(tools): add McpToolAdapter bridging MCP tools to Tool trait whit3rabbitandClaude Sonnet 4.6 2026-03-30 21:59:47 -05:00
• 3e7fe0633e feat(tools): add McpServerManager with tool discovery and JSON-RPC execution whit3rabbitandClaude Sonnet 4.6 2026-03-30 21:58:23 -05:00
• 412501e66f feat(config): add build_tool_config() to convert YAML to policy + loop config whit3rabbitandClaude Sonnet 4.6 2026-03-30 21:55:37 -05:00
• 2d04a2e95f docs: apply review feedback to batch orchestration spec whit3rabbitandClaude Opus 4.6 2026-03-30 21:52:47 -05:00
• c505012de0 feat(config): add tool_execution, builtin_tools, and mcp_servers config sections whit3rabbitandClaude Sonnet 4.6 2026-03-30 21:52:10 -05:00
• 8378065ca0 docs: batch orchestration engine design spec whit3rabbitandClaude Opus 4.6 2026-03-30 21:50:08 -05:00
• 8ab14cc2fa feat(tools): add ToolExecutionEngine core with partition and parallel execution whit3rabbitandClaude Sonnet 4.6 2026-03-30 21:49:41 -05:00
• e647b5349c feat(tools): add LoopTrace, ToolOutcome, and TerminationReason types whit3rabbitandClaude Sonnet 4.6 2026-03-30 21:47:28 -05:00
• 792570c18a feat(tools): add ToolExecutionPolicy with Allow/Deny/PassThrough actions whit3rabbitandClaude Sonnet 4.6 2026-03-30 21:45:39 -05:00
• 6ceee1edd0 docs: add tool execution engine implementation plan whit3rabbitandClaude Opus 4.6 2026-03-30 21:42:39 -05:00
• 9e1e769c4b fix: harden builtin tools and remove redundant error classification whit3rabbitandClaude Opus 4.6 2026-03-30 21:38:54 -05:00
• 35178f5a58 docs: add tool execution engine design spec whit3rabbitandClaude Opus 4.6 2026-03-30 19:33:03 -05:00
• b6277a8b86 feat: operator observability dashboard with error classification whit3rabbitandClaude Opus 4.6 2026-03-30 19:12:03 -05:00
• e053ac8bbc Merge branch 'feat/model-routing-ux' whit3rabbit 2026-03-30 18:24:21 -05:00
• 1ea64a9973 merge: feat/simple-advanced-modes into main; resolve routes.rs conflict whit3rabbitandClaude Sonnet 4.6 2026-03-30 18:12:36 -05:00
• cca8f2740a ci: add nightly workflow for live OpenAI and Bedrock integration tests whit3rabbit 2026-03-30 17:23:14 -05:00
• 85d5364810 docs: create compatibility matrix whit3rabbit 2026-03-30 17:22:32 -05:00
• d510a2c09f test: add boundary tests for MAX_TOOL_CALL_INDEX cap in streaming_map whit3rabbitandClaude Sonnet 4.6 2026-03-30 17:21:05 -05:00
• 35d6489913 fix(config): clearer error for invalid YAML format; document Bedrock region convention whit3rabbit 2026-03-30 17:20:18 -05:00
• 810a436b96 feat: add MODEL_PRICING_FILE env var to override embedded model pricing at startup whit3rabbit 2026-03-30 17:18:47 -05:00
• bccddd9a7e fix: apply stream_timeout_secs to chat_completions streaming path whit3rabbitandClaude Sonnet 4.6 2026-03-30 17:17:19 -05:00
• ae10a851e6 docs: document simple YAML config format in CLAUDE.md whit3rabbit 2026-03-30 17:17:14 -05:00
• 8375efd272 chore(config/simple): verify default_base_url uses owned Strings (no Box::leak) whit3rabbit 2026-03-30 17:16:17 -05:00
• 81fc2dc2aa docs(README): add simple/advanced mode split; gate advanced features under heading whit3rabbit 2026-03-30 17:15:56 -05:00
• 7400b9568e docs(config): update MultiConfig::load() comment to describe simple+LiteLLM dispatch whit3rabbit 2026-03-30 17:15:41 -05:00
• 493b1481f1 docs(CLAUDE.md): document ANYLLM_DEGRADATION_WARNINGS; note opt-in behavior whit3rabbit 2026-03-30 17:14:43 -05:00
• 6950b4ec52 feat(server): gate degradation header in chat_completions; add on/off header tests whit3rabbitandClaude Sonnet 4.6 2026-03-30 17:13:15 -05:00
• 9649e7d2e0 feat: add REQUEST_TIMEOUT_SECS wall-clock cap for streaming responses whit3rabbitandClaude Sonnet 4.6 2026-03-30 17:12:23 -05:00
• 12aa5e100c feat(config): wire simple YAML format into MultiConfig::load via 'models:' key detection whit3rabbit 2026-03-30 17:11:38 -05:00
• b7eb921e37 feat(server): add expose_degradation_warnings to AppState; gate degradation header in routes.rs whit3rabbitandClaude Sonnet 4.6 2026-03-30 17:09:35 -05:00
• b1b15994ee fix: use digit-based pattern for is_o_series_model to handle future oN models whit3rabbitandClaude Sonnet 4.6 2026-03-30 17:08:44 -05:00
• 20549b11b9 fix(security): emit error-level log when PROXY_OPEN_RELAY is active on non-loopback address whit3rabbit 2026-03-30 17:06:51 -05:00
• f15af5969b fix(config): add expose_degradation_warnings to all Config struct literals in tests whit3rabbitandClaude Sonnet 4.6 2026-03-30 17:06:35 -05:00
• d1a9198de2 feat(config): implement parse_simple_yaml with provider env-var defaults and routing strategies whit3rabbit 2026-03-30 17:06:20 -05:00
• 3b4aec97b9 fix: surface upstream error body in BackendError::api_error_details for all variants whit3rabbitandClaude Sonnet 4.6 2026-03-30 17:04:43 -05:00
• 3e1dfbe1a7 fix(config): expose_degradation_warnings on MultiConfig; env var + PROXY_CONFIG auto-enable whit3rabbitandClaude Sonnet 4.6 2026-03-30 17:04:07 -05:00
• 8fe180cac8 feat(config): add SimpleConfig serde types for simple YAML format whit3rabbit 2026-03-30 17:00:44 -05:00
• 6d3285dc87 feat(config): add expose_degradation_warnings; auto-enable with PROXY_CONFIG whit3rabbitandClaude Sonnet 4.6 2026-03-30 17:00:00 -05:00
• 7c1559579c fix(bedrock): validate CRC32 checksums on event stream frames whit3rabbitandClaude Sonnet 4.6 2026-03-30 16:59:58 -05:00
• 5f5d73399e fix: include cache_ttl_secs in cache key to prevent TTL collision whit3rabbit 2026-03-30 16:57:18 -05:00
• d362c3d609 fix: interpret \n \t \\ escape sequences in double-quoted env file values whit3rabbitandClaude Sonnet 4.6 2026-03-30 16:55:03 -05:00
• fa48f60567 chore: remove stale AGENTS.md, historical task PRDs, and personal branch tracking file whit3rabbit 2026-03-30 16:52:35 -05:00
• b3b191e4bd chore: bump workspace version to 0.2.0 to match anyllm_client whit3rabbit 2026-03-30 16:51:31 -05:00
• 14c4d24a91 chore: track Cargo.lock for reproducible builds whit3rabbit 2026-03-30 16:49:39 -05:00
• aeed1a6a86 chore: ignore .worktrees/ directory whit3rabbit 2026-03-30 16:46:32 -05:00
• e26bc71638 docs(security): document CSRF public-route decision; update CLAUDE.md audit summary whit3rabbitandClaude Sonnet 4.6 2026-03-30 06:38:25 -05:00
• 530093b226 fix(security): reject private/loopback webhook URLs; use SSRF-safe client whit3rabbitandClaude Sonnet 4.6 2026-03-30 06:38:19 -05:00
• 58ecc4dd49 fix(security): validate OIDC issuer and JWKS URLs; use SSRF-safe client whit3rabbitandClaude Sonnet 4.6 2026-03-30 06:38:13 -05:00
• 4fbaf43011 fix(security): populate source_ip in all admin audit log entries whit3rabbitandClaude Sonnet 4.6 2026-03-30 06:38:05 -05:00
• 3a000fd8b9 fix(security): replace fixed-window admin rate limiter with sliding window whit3rabbitandClaude Sonnet 4.6 2026-03-29 19:23:20 -05:00
• be19ac1c36 fix(security): redact AWS_ACCESS_KEY_ID and add GOOGLE_ACCESS_TOKEN to env endpoint whit3rabbitandClaude Sonnet 4.6 2026-03-29 19:09:37 -05:00
• 5c73adfaea feat(admin): team-focused UI overhaul with key editing and audit log whit3rabbitandClaude Opus 4.6 2026-03-29 18:08:34 -05:00
• 29badbf639 fix(test): eliminate ADMIN_RPM race in admin_rate_limit_enforced test whit3rabbitandClaude Opus 4.6 2026-03-28 20:49:51 -05:00
• e13610667d style: use rsplit+find instead of filter+last to satisfy clippy whit3rabbitandClaude Opus 4.6 2026-03-28 18:35:14 -05:00
• ea3580fe2e fix: retain millisecond precision in Langfuse start-time calculation whit3rabbitandClaude Opus 4.6 2026-03-28 18:29:05 -05:00
• 33ae113360 fix: persist budget period reset to SQLite to prevent desync across restarts whit3rabbitandClaude Opus 4.6 2026-03-28 18:27:24 -05:00
• 4a76511e38 fix(security): block IPv6 ULA (fc00::/7) and link-local (fe80::/10) in SSRF guard whit3rabbitandClaude Opus 4.6 2026-03-28 18:21:28 -05:00
• 51231d30f3 fix(security): take rightmost X-Forwarded-For IP to prevent allowlist spoofing whit3rabbitandClaude Opus 4.6 2026-03-28 18:18:43 -05:00
• 3588f52ccb docs: expand library usage examples; borrow header slices in passthrough whit3rabbitandClaude Sonnet 4.6 2026-03-28 14:48:19 -05:00
• aeb1e5efb3 feat(passthrough): forward anthropic-beta and x-claude-code-session-id headers upstream whit3rabbitandClaude Sonnet 4.6 2026-03-28 13:43:47 -05:00
• 9db0465732 docs: update CLAUDE.md with current state whit3rabbitandClaude Sonnet 4.6 2026-03-28 13:38:43 -05:00
• 4ed08524fb feat(gemini): emit thinking_delta events in GeminiStreamingTranslator whit3rabbitandClaude Sonnet 4.6 2026-03-28 13:38:37 -05:00
• dcee73ce2b feat(gemini): map thinking_config to thinkingConfig, thought parts to ThinkingBlock whit3rabbitandClaude Sonnet 4.6 2026-03-28 13:38:31 -05:00
• 69d25d0d63 feat(gemini): add Part.thought and GenerationConfig.thinkingConfig types whit3rabbitandClaude Sonnet 4.6 2026-03-28 13:38:26 -05:00
• 9b90e5049d fix: upgrade jsonwebtoken 9 -> 10 to resolve CVE (type confusion / auth bypass) whit3rabbitandClaude Sonnet 4.6 2026-03-28 10:25:20 -05:00
• 7961436a14 feat: wire Gemini native path end-to-end (Phases 5-8) whit3rabbitandClaude Sonnet 4.6 2026-03-28 10:05:01 -05:00
• c19a7c137c feat(proxy): add Gemini native HTTP client for generateContent endpoints whit3rabbitandClaude Sonnet 4.6 2026-03-28 09:49:28 -05:00
• ef8d7d26ca feat(translator): add Gemini streaming state machine with full-response diffing whit3rabbitandClaude Sonnet 4.6 2026-03-28 09:46:19 -05:00
• 61276876b8 feat(translator): add Anthropic<->Gemini message mapping with role merge and tool ID synthesis whit3rabbitandClaude Sonnet 4.6 2026-03-28 09:46:12 -05:00
• ff55dba6e5 feat(translator): add Gemini native API types for generateContent whit3rabbitandClaude Opus 4.6 2026-03-28 09:41:14 -05:00
• 320b44b6c0 fix: resolve clippy warnings from parallel subagent work whit3rabbitandClaude Opus 4.6 2026-03-28 08:38:43 -05:00
• 09968ffca1 feat(proxy): register /v1/messages/batches routes, remove legacy stub whit3rabbit 2026-03-28 00:04:06 -05:00
• 78def09d43 feat(admin-ui): send CSRF token in all state-mutating requests whit3rabbit 2026-03-27 23:49:51 -05:00
• 1d167e9863 feat(proxy): add Anthropic batch route handlers whit3rabbit 2026-03-27 23:47:00 -05:00
• c9e9221caf ci: add cargo-audit step to catch crates with known CVEs whit3rabbit 2026-03-27 23:45:36 -05:00
• 6cd37068e3 feat(admin): add CSRF token middleware and /admin/csrf-token endpoint whit3rabbit 2026-03-27 23:45:03 -05:00
• 21bf301b24 feat(proxy): add anthropic_batch_map table for id mapping whit3rabbit 2026-03-27 23:44:26 -05:00
• aabe7fe982 feat(proxy): add OpenAI batch API HTTP client whit3rabbit 2026-03-27 23:41:47 -05:00
• c494c9a216 feat(translator): apply OpenAI strict mode when Anthropic forces a specific tool whit3rabbit 2026-03-27 23:39:06 -05:00
• ee06732f02 feat(translator): add batch JSONL translation functions whit3rabbit 2026-03-27 23:38:56 -05:00
• d81f0c32f4 feat(admin): add CSRF token generation and validation helpers whit3rabbit 2026-03-27 23:37:36 -05:00
• 5e9cb61f4b feat(translator): add normalize_schema_for_strict for OpenAI strict mode whit3rabbit 2026-03-27 23:34:18 -05:00
• 60b13b6cb6 feat(translator): add Anthropic batch request/response types whit3rabbit 2026-03-27 23:34:16 -05:00
• 3bd1db1e5c fix: batch JSONL error messages report absolute line number not non-empty-line count whit3rabbit 2026-03-27 23:00:58 -05:00
• 00242ca653 fix: batch JSONL validation uses BufRead to avoid redundant Vec<u8> copy whit3rabbit 2026-03-27 22:57:46 -05:00
• f7e4334bee fix: apply Gemini tool schema sanitizer to OpenAI-format chat_completions path whit3rabbit 2026-03-27 22:52:36 -05:00
• 5dacb8cf63 feat: sanitize Gemini tool schemas by stripping unsupported JSON Schema fields whit3rabbitandClaude Sonnet 4.6 2026-03-27 22:46:11 -05:00
• 52c6ffa3dd feat: compute requests_per_second from SQLite in admin metrics snapshot whit3rabbit 2026-03-27 22:38:45 -05:00
• cad85745f3 fix: replace brittle Bedrock event-type substring search with serde_json parse whit3rabbit 2026-03-27 22:34:05 -05:00
• 08a03001c3 feat: wire Responses API streaming usage into request log and cost tracking whit3rabbit 2026-03-27 22:27:08 -05:00
• c9ce57ebb1 fix: langfuse startTime uses ms precision for sub-second requests whit3rabbit 2026-03-27 22:21:09 -05:00
• dbd63437b0 fix: remove stale is_streaming doc comment about metrics tracking whit3rabbit 2026-03-27 22:16:33 -05:00
• c78e15e48a docs: mark Langfuse integration complete in COMPARISON_LITELLM.md whit3rabbitandClaude Sonnet 4.6 2026-03-27 21:34:03 -05:00
• 0408e669f3 feat: wire Langfuse named callback into CallbackConfig and startup whit3rabbitandClaude Sonnet 4.6 2026-03-27 21:31:53 -05:00
• 4424816c3b fix: correct days_from_civil formula and fix env-var test race whit3rabbitandClaude Sonnet 4.6 2026-03-27 21:25:44 -05:00
• 28cd98f58c feat: implement LangfuseClient with base64 and ISO 8601 helpers whit3rabbitandClaude Sonnet 4.6 2026-03-27 21:14:41 -05:00
• 89dd165b6a feat: add integrations module skeleton with NamedIntegration enum whit3rabbitandClaude Sonnet 4.6 2026-03-27 21:07:28 -05:00